
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa
File: 323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier: O37eDpuygs32uquQ0kI0tIEA8FrNxkV1PeG0DvTpSKk=
Subject key identifier: CB:FF:86:22:AD:6B:9E:89:E7:6D:01:F2:87:90:6F:C6:90:B5:75:AD
Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial: 5C77FD602C93966201FD7BC8D1E7CAA6883BAB34
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa
Signing time: Mon 15 Sep 2025 02:46:35 +0000
ROA not before: Mon 15 Sep 2025 02:41:35 +0000
ROA not after: Mon 14 Sep 2026 02:46:35 +0000
asID: 272889
IP address blocks: 2803:8690:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:77:fd:60:2c:93:96:62:01:fd:7b:c8:d1:e7:ca:a6:88:3b:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Validity
Not Before: Sep 15 02:41:35 2025 GMT
Not After : Sep 14 02:46:35 2026 GMT
Subject: CN=CBFF8622AD6B9E89E76D01F287906FC690B575AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:3b:3c:0b:3f:b5:ee:56:68:34:f5:2d:58:
f5:2d:fd:c2:06:83:4a:a6:c6:a4:f6:b3:2a:b4:b9:
2e:68:a2:2e:81:3a:16:e3:57:8f:e3:e6:45:77:2f:
93:33:b5:ee:f5:14:76:5e:b7:9a:ee:da:5c:7a:8a:
30:32:5c:76:19:83:45:e0:d0:d8:5a:9c:d6:91:71:
b9:c4:e5:df:dc:51:aa:a7:14:a8:96:20:ee:b3:33:
24:26:2c:23:12:46:39:41:4c:77:d3:4c:dd:75:5a:
8f:7f:6d:3f:5a:a1:ea:0d:8d:2c:73:78:c9:32:3a:
dd:70:a0:95:9a:53:1e:73:38:a9:c8:80:76:52:c8:
ac:23:c4:1f:23:45:6f:03:3c:4f:b2:fc:5a:e9:e7:
65:59:70:56:ea:4e:d9:e4:c1:49:08:70:34:88:fb:
ff:e9:7e:9a:fc:53:af:33:e2:ac:8e:2a:21:14:87:
20:45:67:6a:aa:fd:21:6b:82:55:30:ab:1b:36:67:
c8:7a:80:1c:2e:9c:27:d8:58:ab:03:bb:0c:db:86:
ad:de:8b:fa:30:63:e0:59:34:80:5d:e8:1f:bb:fe:
bf:fa:72:67:60:46:f2:f6:c5:6f:58:27:d8:31:32:
4d:9b:da:89:c1:47:3e:d8:67:79:58:42:8d:27:78:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:86:22:AD:6B:9E:89:E7:6D:01:F2:87:90:6F:C6:90:B5:75:AD
X509v3 Authority Key Identifier:
keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8690:100::/40
Signature Algorithm: sha256WithRSAEncryption
c0:ea:64:e2:29:48:14:2a:f5:e6:54:fb:d3:0f:ed:69:cb:f7:
e9:d6:b1:c2:ac:28:e9:2a:92:af:a8:d6:d6:16:ce:86:a5:22:
4a:4d:27:71:d9:d7:f7:dc:4b:1e:8f:36:19:a8:04:38:7e:e2:
d5:e5:c7:48:c4:39:ac:dd:e2:1b:c3:94:42:f6:01:d4:e9:2b:
57:8c:5c:80:b8:93:da:b0:53:4e:27:e0:27:fe:ed:6c:df:f5:
c8:ea:4a:56:fd:0e:30:39:c1:d2:a6:44:a2:16:e4:b0:40:50:
89:23:1d:cc:dd:3c:b7:13:e3:18:a4:c6:c8:e0:6c:44:ec:ca:
b1:f3:69:fa:3c:da:60:ce:2a:78:1e:fd:da:b9:57:04:24:3d:
f6:76:d2:b9:18:b1:61:2b:a8:18:c6:4f:f9:1b:63:9d:52:81:
05:bc:d3:7c:33:e6:e0:f6:bf:da:54:fe:49:70:61:bd:09:8a:
e3:c7:81:a3:0e:d0:8b:a8:28:93:5d:3c:58:73:97:f7:07:03:
96:bd:96:80:0b:92:c2:c8:1b:4f:eb:5d:b2:ab:53:70:6a:2d:
74:d1:d6:c1:9e:a4:47:2a:34:a1:e3:97:ef:4c:a1:07:ee:d7:
6a:4f:16:cc:76:3d:21:a2:a0:1f:5c:c0:d9:c6:ea:33:a5:0b:
cd:57:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:09:44 2025 by rpki-client